NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper     handling of insufficient permissions or privileges may allow an unprivileged local user limited write     access to protected memory, which can lead to denial of service. (CVE-2022-21814)

Note that Nessus relies on the presence of the package as reported by the vendor.

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities:

  - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of     insufficient permissions or privileges may allow an unprivileged local user limited write access to protected     memory, which can lead to denial of service. (CVE-2022-21813)

  - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling     of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected     memory, which can lead to denial of service. (CVE-2022-21814)

Note that Nessus has not tested for the issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5276-1 advisory.

    It was discovered that the NVIDIA graphics drivers incorrectly handled permissions in the kernel mode     layer. A local attacker could use this issue to write to protected memory and cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
245345	Linux Distros Unpatched Vulnerability : CVE-2022-21814	Nessus	Misc.	medium
158894	NVIDIA Linux GPU Display Driver (February 2022)	Nessus	Misc.	medium
157456	Ubuntu 18.04 LTS / 20.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-5276-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2022-21814

medium

Tenable Plugins

medium

medium

medium